Public
- Public
- Network
- Groups
- Popular
- People

Conversation

Notices

LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864} (lnxw48a1@nu.federati.net)'s status on Friday, 08-Oct-2021 14:49:32 UTC LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864}
- GNU Social
https://nu.federati.net/url/283133 [www bleepingcomputer com]

We should probably keep an eye on dormant accounts on !gnusocial and #Friendica also.
In conversation Friday, 08-Oct-2021 14:49:32 UTC from nu.federati.net permalink
Attachments
1. Vidar stealer abuses Mastodon to silently get C2 configuration
  
  from BleepingComputer
  
  The Vidar stealer has returned in a new campaign that abuses the Mastodon social media network to get C2 configuration without raising alarms.
- LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864} (lnxw48a1@nu.federati.net)'s status on Friday, 08-Oct-2021 15:39:54 UTC LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864}
  in reply to
  
  For those who didn't follow the link: malware is using account profiles on socnet servers (specifically mentions #Mastodon) to direct their software to command and control servers. If you think about it, it means that the C2 servers themselves need not be hard-coded into the malware infector software, as they can update the social network site's profile links if a particular C2 server is taken down.
  
  In conversation Friday, 08-Oct-2021 15:39:54 UTC permalink

Feeds